Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa
File:                     365c666b-c4bc-3afb-83f1-a757b272848e.roa (raw, json)
Hash identifier:          ZWCl2hJF8gu9tKH38P8rMgQwKLtAQ5JCQGsOHARE+Mo=
Subject key identifier:   64:A7:15:4F:F4:2F:7A:EB:C6:D9:BA:D0:5F:69:30:FE:9D:89:A3:40
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584A14655EB87811BDBDA0973340
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     10747
IP address blocks:        170.133.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5e:b8:78:11:bd:bd:a0:97:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=cf32de9d-e011-4833-b5c6-fb5dbb863356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:77:a6:34:b4:3e:07:be:81:3a:d0:b2:80:f2:
                    f7:67:9c:55:99:f0:b0:b9:1e:56:80:de:85:e3:f0:
                    68:11:20:d7:40:55:98:b7:a9:c8:9d:27:3c:60:33:
                    2e:b7:91:99:96:c0:83:3f:70:19:bd:f2:cb:d4:59:
                    1d:bd:3f:1b:12:b4:0b:a8:58:58:de:9a:82:31:82:
                    b5:a2:39:61:57:49:2f:5f:23:42:c9:09:09:d8:4e:
                    a0:6f:93:7f:20:ca:a0:3a:cb:bd:c8:a2:1e:8e:b8:
                    6e:ed:66:0d:ae:67:df:bb:aa:43:6a:a6:af:90:41:
                    6d:df:4e:58:2a:81:02:8f:8c:a9:f1:ec:c5:2e:9a:
                    c6:90:38:8b:d0:7c:59:74:39:6b:cd:0f:98:75:f2:
                    91:13:07:0c:f5:31:d7:05:e5:28:84:3b:2a:a9:7e:
                    b2:cf:00:7f:c6:91:70:38:7a:01:ee:6f:3e:3c:f9:
                    8e:d5:b5:fc:2a:9c:ee:48:74:0f:50:76:89:50:36:
                    39:aa:7d:be:2e:16:2a:68:24:be:33:c1:97:ab:32:
                    84:bd:a6:6c:d7:f9:e4:e2:70:63:7a:85:9b:9d:83:
                    d6:5e:77:48:31:39:16:f7:00:2a:2e:32:c2:2f:c7:
                    c5:c2:cc:ac:fa:c4:6f:48:92:11:57:53:73:c4:60:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A7:15:4F:F4:2F:7A:EB:C6:D9:BA:D0:5F:69:30:FE:9D:89:A3:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/365c666b-c4bc-3afb-83f1-a757b272848e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.133.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e4:05:91:bf:7b:16:93:ee:d1:a0:b9:03:56:a0:51:a6:88:
         05:de:a7:0d:53:9a:c3:b9:47:bb:3e:00:c1:c7:5f:50:bb:06:
         0f:04:66:d4:e0:b4:d5:57:88:e2:0f:f0:37:79:82:52:b4:69:
         4f:c5:0e:de:f6:aa:74:fc:ea:0b:7a:f4:53:de:ee:bf:6e:6d:
         5e:17:dc:3c:62:75:48:ac:2e:bf:ff:42:3a:26:e8:e8:13:80:
         a5:f3:0f:7a:11:26:07:64:07:76:a9:50:ff:c5:33:fe:c6:fd:
         a4:e3:5f:c3:1f:a3:51:a5:84:4b:a8:da:1a:dd:eb:89:e4:45:
         95:7b:fd:d2:a2:8d:3a:47:4f:ba:88:26:3f:bd:3c:63:60:a1:
         97:b7:0e:8a:31:19:4d:37:9a:78:0c:c3:d7:88:8b:22:6f:ed:
         51:29:57:09:8b:2d:1d:8b:32:65:9a:c9:ec:39:92:41:35:a5:
         e6:d0:87:48:00:94:8c:0b:54:a0:3d:a4:e0:7d:13:12:e3:1c:
         a1:7d:93:f9:0a:a2:66:86:d1:04:1a:f3:20:af:8d:eb:fd:0b:
         32:c5:b3:d8:3f:81:ac:6c:d3:98:37:0d:96:16:61:d9:ba:c3:
         b5:64:42:cd:cf:40:9e:9a:e6:64:0b:b0:9e:0a:ad:76:8c:17:
         b1:61:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:17 2025 by rpki-client